Vulnerabilities

TI-2023-21961 CVE-2023-41364 · GHSA-rq5f-3279-ph4j

In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection.

HIGH 82

In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00953 Published 2023-09-01 No fix listed CWE-89

TI-2011-01451 CVE-2011-1666 · GHSA-2xx8-62cr-6w92

Metaways Tine 2.0 allows remote attackers to obtain sensitive information via unknown…

LOW 26

Metaways Tine 2.0 allows remote attackers to obtain sensitive information via unknown vectors in (1) Crm/Controller.php, (2) Crm/Export/Csv.php, or (3) Calendar/Model/Attender.php, which reveal the full installation path…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01392 Published 2011-04-10 No fix listed CWE-200

Vulnerabilities

Filters

In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection.

Metaways Tine 2.0 allows remote attackers to obtain sensitive information via unknown…